107,312 results · Clear filters · Feed
-
Medium 5.4
JeecgBoot through 3.9.5 Missing Authorization via /sys/position/deleteBatch
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController deleteBatch handler that allows any authenticated user to delete organizational positions. Low-privileged attackers can send comma-separated position ids, obta…
-
Medium 4.3
JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message templates via PUT /sys/message/sysMessageTemplate/edit. Attackers can obtain template ids from the unguarded list endpoint …
-
Medium 5.4
JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate deleteBatch Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete message templates via the DELETE /sys/message/sysMessageTemplate/deleteBatch endpoint. Attackers can supply comma-separated templat…
-
Medium 4.3
JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add. Attackers holding only minimal roles can insert arbitrary no…
-
Medium 5.4
JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/delete
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI evaluator records. Attackers can send DELETE requests to /airag/extData/delete with…
-
Medium 5.4
JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/deleteBatch
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records. Low-privileged attackers can send comma-separated ids to DELETE /airag/…
-
Medium 4.3
JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler that allows any authenticated user to export AI evaluator data. Low-privileged attackers can request /airag/extData/exportXls to download ev…
-
Medium 5.4
JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates. Attackers can send a DELETE request to /airag/word/deleteBatc…
-
Medium 5.4
JeecgBoot through 3.9.5 Missing Authorization via /airag/app/release Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that allows any authenticated user to publish or unpublish other users' AI applications. Low-privileged attackers can send POST requests to /airag…
-
Medium 5.4
JeecgBoot through 3.9.5 Missing Authorization via /airag/word/delete Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. Low-privileged attackers can send DELETE requests to /airag/word/delete with a…
-
Medium 4.3
JeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler that allows any authenticated user to modify word templates. Low-privileged attackers can send PUT or POST requests to /airag/word/edit to ov…
-
Medium 4.3
JeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' AI voice generation history via the userId parameter of GET /airag/voice/listByUser. Attackers who know another user's id c…
-
Medium 4.3
JeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId Parameter
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI voice records by supplying an arbitrary userId to DELETE /airag/voice/deleteVoiceRecord. Attackers can obtain record i…
-
Medium 5.4
JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/deleteById
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records. Low-privileged attackers can obtain record ids from the unguarded GET /airag/ocr/list en…
-
Medium 4.3
JeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId Parameter
JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI video generation records by supplying arbitrary userId values to DELETE /airag/video/deleteVideoRecord. Attackers can …
-
Medium 4.3
JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/edit Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. Low-privileged attackers can send PUT requests to /airag/ocr/edit to overwrite …
-
Medium 4.3
WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-alidropship allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD – Dropshipping and Fulfillment f…
-
Medium 6.3
Tabularis through 0.27.0 Read-Only Bypass via MCP run_query SELECT Classification
Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecting SELECT statements. Attackers can run …
-
Medium 4.3
Helicone through v2025.08.21-1 SSRF via Jawn Webhook Sender DNS Resolution
Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses. Attackers can create webh…
-
Medium 6.9
Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS
Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision (34 digits by default) is applied, so its cost…
-
Medium 5.3
WordPress YITH WooCommerce Product Add-Ons plugin <= 4.34.0 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0.
-
Medium 5.4
WordPress MicroPayments plugin <= 3.2.9 - Bypass Vulnerability vulnerability
Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions.
-
Medium 5.3
WordPress Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin <= 1.7.2 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway <= 1.7.2 versions.
-
Medium 6.8
WordPress Presto Player Pro plugin <= 3.0.1 - Arbitrary File Deletion vulnerability
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
-
Medium 6.5
WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Execution vulnerability
Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
-
Medium 6.3
WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
-
Medium 6.5
WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
-
Medium 5.9
WordPress Swish Migrate and Backup plugin <= 1.4.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
-
Medium 4.7
open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape via file_write Dangling Symlink
open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the file_write tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers can plant a dangling s…
-
Medium 4.7
Phi 0.1.1 through 0.28.4 Symlink Workspace Write Restriction Bypass
phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass workspace_only_writes by exploiting lexical-only path checks in the permission gate. Attackers can commit symlinks pointing outside the wo…
-
Medium 4.8
Cohere Python SDK 5.11.0 through 7.2.0 Path Traversal via SageMaker Tar Extraction
Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix …
-
Medium 5.3
OpenLIT 2.1.0 Authorization Bypass via x-openlit-project-id Header
OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header. Attackers who know a victim project id and database config id can query the trace…
-
Medium 6.5
WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability
Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3.
-
Medium 5.3
Phi 0.3.0 through 0.28.4 Permission Bypass via agent_spawn Workdir
Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspace_only_writes and readonly mode by supplying an unchecked workdir to agent_spawn. Attackers can plant prompt-injected instructions in processe…
-
Medium 6.4
9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint
9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to inject arbitrary keys into the Hermes Agent config.yaml file. Attackers can submit a…
-
Medium 5.3CVE-2026-108592 Public exploit
mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment
mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host environment. Attackers using prompt injection in processed task content can make…
-
Medium 4.4
InnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool
InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stre…
-
Medium 6.9
WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3.
-
Medium 5.4
1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter
1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negated advanced tag-filter expressions. Attackers holding a single-tag token can se…
-
Medium 5.4
argocd-mcp through 0.9.0 Path Traversal via delete_application Tool
argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supp…